Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa
File:                     bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa (raw, json)
Hash identifier:          v5wMDSX6ABt5TGmM6OJnHzT4+gKn5VYwx/kthpghWWg=
Subject key identifier:   88:34:73:B3:21:16:78:58:A2:CA:DF:84:56:CE:56:68:B6:70:82:2D
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848AFAF0C6D13B7F186FE6CB530
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa
Signing time:             Mon 27 Jan 2025 18:26:03 +0000
ROA not before:           Mon 27 Jan 2025 18:26:03 +0000
ROA not after:            Sun 27 Apr 2025 17:26:03 +0000
asID:                     15164
IP address blocks:        140.82.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:af:0c:6d:13:b7:f1:86:fe:6c:b5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 27 18:26:03 2025 GMT
            Not After : Apr 27 17:26:03 2025 GMT
        Subject: CN=ef7f79e9-2b78-4cde-9907-a3ee652107f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:b1:6b:e2:b1:dd:95:13:c0:a0:76:35:82:
                    7c:8a:99:e3:f7:f0:6d:97:5e:b6:a5:ff:05:6a:f0:
                    cd:92:9c:25:ba:f9:23:cb:29:60:42:48:78:03:62:
                    69:4e:a7:1e:e1:0d:1a:77:72:f7:d8:40:91:af:36:
                    0c:e8:c7:0c:ae:30:ad:d8:29:78:d1:39:be:6f:b6:
                    08:da:f6:87:e2:34:67:99:3a:8a:32:06:3c:38:5b:
                    92:46:d0:88:de:9f:f2:c0:83:98:82:20:48:bc:90:
                    a4:d0:4c:a5:a9:6f:08:e1:1d:47:0d:a2:40:e4:13:
                    eb:90:16:0e:a5:9e:1f:f7:97:70:9b:fe:80:66:43:
                    d4:87:44:e5:8b:48:51:61:81:b7:fb:0a:13:1a:98:
                    e6:e8:67:d5:12:65:97:b0:b7:7a:b1:4d:a1:53:de:
                    de:af:da:09:64:5e:01:06:37:2f:73:e0:bd:2c:ba:
                    a6:68:59:dd:46:44:9b:da:2f:b0:96:c2:fc:6c:e8:
                    de:a6:96:19:7d:ed:ec:c4:3b:3f:96:b7:6f:e7:6c:
                    d1:54:6c:14:44:49:35:ed:49:8d:a7:36:12:1a:e9:
                    cb:71:c4:60:83:32:b6:63:58:7d:b5:88:d8:b8:89:
                    40:5b:f8:a1:75:fe:3e:e6:74:5a:10:92:22:9f:39:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:73:B3:21:16:78:58:A2:CA:DF:84:56:CE:56:68:B6:70:82:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:bb:c8:2b:aa:fc:de:61:1e:8b:21:ef:77:28:9d:cc:f4:ef:
         30:15:44:05:15:28:96:fc:99:1d:df:46:d0:92:41:5f:34:b1:
         49:d7:28:50:ef:48:86:71:bf:c6:07:05:69:81:ce:35:a5:42:
         37:c4:a9:d2:18:d7:fb:fe:4b:3c:a5:ca:7e:2d:52:51:eb:d6:
         df:78:32:2a:c2:8e:40:53:64:5d:e6:33:d8:60:29:db:a7:fa:
         82:28:4f:e5:e8:bd:70:84:78:7c:a3:b9:f2:f8:fd:a3:d4:0c:
         ae:55:7b:24:52:91:b0:f0:14:ab:a6:30:5e:95:36:38:45:a1:
         1f:62:3e:ba:49:3c:60:0e:1b:9a:a1:23:7a:40:36:c1:f6:a9:
         10:df:57:07:66:ff:fb:c3:41:c8:0e:26:86:92:7a:02:3f:d3:
         cb:91:20:ac:38:ea:04:13:62:22:bb:d3:66:91:5d:f3:08:71:
         81:55:2c:94:16:21:e9:2b:01:a0:89:ab:bc:f7:02:5b:78:90:
         db:4e:50:81:e1:cb:84:2f:de:67:73:aa:26:a0:1f:1a:ed:bd:
         f0:2e:a4:1b:b3:64:58:23:c4:d0:c7:8d:19:89:fa:46:36:31:
         88:70:02:82:37:59:c9:b9:d0:b4:f8:60:de:ad:43:96:1f:f7:
         13:11:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:57 2025 by rpki-client